This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa File: sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa (raw, json) Hash identifier: ubV13xd7F+TAQ+CmwFI8p32k3paHxp1b+b+S6Z39W1M= Subject key identifier: B0:CC:67:F1:91:D5:EF:31:95:51:D7:D7:74:6D:73:11:B8:18:C3:69 Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015 Certificate serial: 019B7A5A0619A16D6AE6BC7EDD986AED22F3 Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa Signing time: Thu 01 Jan 2026 16:17:58 +0000 ROA not before: Thu 01 Jan 2026 16:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.117.183.0/24 maxlen: 24 2a03:52a0:183::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:06:19:a1:6d:6a:e6:bc:7e:dd:98:6a:ed:22:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015 Validity Not Before: Jan 1 16:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0cc67f191d5ef319551d7d7746d7311b818c369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5a:18:b8:bb:be:6d:ed:bd:aa:ec:90:29:63: eb:43:12:c4:c8:2d:8e:0d:a0:4a:78:3e:7d:ee:64: ef:9d:75:44:be:36:68:ba:8c:0f:a6:28:1b:76:6f: e2:83:ad:79:c4:ed:9e:c0:8d:2e:3a:9d:2e:c5:01: 9d:91:f4:7b:82:dc:e5:eb:f3:00:95:e5:70:ba:97: ca:b3:09:46:8c:f5:b6:04:e5:47:01:59:5b:a5:4a: ca:ee:60:b0:e2:0f:91:8d:a8:06:a0:6f:c3:d1:21: 62:e4:ac:f2:0a:12:ee:e6:96:35:2f:02:fa:82:4b: 8b:dd:8b:2a:4a:c4:7c:1f:bf:81:91:06:b9:d6:53: 59:e9:a4:fb:ce:aa:45:0f:03:86:00:c9:b6:c8:82: ea:d4:62:c2:3c:1f:4c:61:a6:31:e0:93:f3:6d:d9: db:c8:f6:ee:3d:48:d2:42:2f:60:52:4f:ef:5c:2e: fc:7d:c1:b1:98:0b:c1:f0:95:03:4b:f9:19:87:f0: ef:f3:e3:ef:d6:36:b3:8a:76:61:31:39:5c:3e:a8: 2e:45:e6:37:e7:e0:9c:3f:11:fe:ae:e9:e9:cd:4e: d4:5b:ba:5d:f8:ab:d8:fc:5c:e5:7e:96:76:6b:a2: 84:f6:a9:63:3b:71:fe:8e:34:82:b3:9f:eb:98:54: 57:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CC:67:F1:91:D5:EF:31:95:51:D7:D7:74:6D:73:11:B8:18:C3:69 X509v3 Authority Key Identifier: keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.183.0/24 IPv6: 2a03:52a0:183::/48 Signature Algorithm: sha256WithRSAEncryption 94:2e:09:31:ec:03:d6:3c:44:73:17:1a:2d:e1:79:f0:37:47: 49:c3:4e:ea:6c:18:f9:55:f3:fa:da:0b:1e:a9:da:9e:66:9b: e6:a1:48:85:88:c3:0b:a7:b5:c6:b8:07:65:5f:59:15:61:a8: 8d:92:57:e2:a6:07:cb:21:4f:8d:18:b2:a0:69:84:15:f9:c3: 38:bd:86:9b:91:21:b4:ad:f2:23:4e:d0:80:07:42:e1:ab:df: a3:09:1c:d4:4c:5b:14:7b:75:89:af:6e:f6:76:94:88:8c:c6: d0:0d:33:1f:74:6a:46:fa:c3:bc:f1:a1:4e:63:6d:25:43:c9: 41:1e:35:68:e1:66:e8:ee:bb:08:d9:01:75:69:41:d4:55:ab: 8b:8a:c1:7e:10:78:ce:10:da:3c:c8:b2:43:43:d6:15:4b:2e: 04:b4:c5:77:e6:9e:f0:48:a4:cf:cd:8d:05:2e:98:f0:0c:00: 6d:35:57:54:78:79:32:57:69:1f:29:ec:49:66:96:e2:a8:97: f3:68:98:13:e2:af:bc:c3:aa:d6:46:30:1f:a8:4a:42:38:ac: 46:50:43:49:72:86:55:d6:41:e5:2e:21:6d:f6:71:61:6b:ee: cf:17:36:bf:8b:b0:7c:c5:d1:f6:f3:eb:52:cc:94:3a:c1:86: 7f:d6:6e:18 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6WgYZoW1q5rx+3Zhq7SLzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGM2ODVlZmE2YTJjMTA0NTYzN2YwMjdhMzI1YzBhZWM3 OWMwMTUwHhcNMjYwMTAxMTYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGNjNjdmMTkxZDVlZjMxOTU1MWQ3ZDc3NDZkNzMxMWI4MThjMzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1oYuLu+be29quyQKWPrQxLEyC2O DaBKeD597mTvnXVEvjZouowPpigbdm/ig615xO2ewI0uOp0uxQGdkfR7gtzl6/MA leVwupfKswlGjPW2BOVHAVlbpUrK7mCw4g+RjagGoG/D0SFi5KzyChLu5pY1LwL6 gkuL3YsqSsR8H7+BkQa51lNZ6aT7zqpFDwOGAMm2yILq1GLCPB9MYaYx4JPzbdnb yPbuPUjSQi9gUk/vXC78fcGxmAvB8JUDS/kZh/Dv8+Pv1jazinZhMTlcPqguReY3 5+CcPxH+runpzU7UW7pd+KvY/FzlfpZ2a6KE9qljO3H+jjSCs5/rmFRXzwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLDMZ/GR1e8xlVHX13RtcxG4GMNpMB8GA1UdIwQY MBaAFLpMaF76aiwQRWN/AnoyXArsecAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQt Yzg2MDQ3MjA2NDJkLzEvc014bjhaSFY3ekdWVWRmWGRHMXpFYmdZdzJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQtYzg2MDQ3MjA2NDJk LzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuXW3MA8E AgACMAkDBwAqA1KgAYMwDQYJKoZIhvcNAQELBQADggEBAJQuCTHsA9Y8RHMXGi3h efA3R0nDTupsGPlV8/raCx6p2p5mm+ahSIWIwwuntca4B2VfWRVhqI2SV+KmB8sh T40YsqBphBX5wzi9hpuRIbSt8iNO0IAHQuGr36MJHNRMWxR7dYmvbvZ2lIiMxtAN Mx90akb6w7zxoU5jbSVDyUEeNWjhZujuuwjZAXVpQdRVq4uKwX4QeM4Q2jzIskND 1hVLLgS0xXfmnvBIpM/NjQUumPAMAG01V1R4eTJXaR8p7ElmluKol/NomBPir7zD qtZGMB+oSkI4rEZQQ0lyhlXWQeUuIW32cWFr7s8XNr+LsHzF0fbz61LMlDrBhn/W bhg= -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:26 2026 by rpki-client